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Period for Reply 

A SHORTENED STATUTORY PERIOD FOR REPLY IS SET TO EXPIRE 3 MONTH(S) OR THIRTY (30) DAYS, 

WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
after SIX (6) MONTHS from the mailing date of this communication. 

- If NO period for reply is specified above, the maximum statutory period will apply and will expire SIX (6) MONTHS from the mailing date of this communication. 

- Failure to reply within the set or extended period for reply will, by statute, cause the application to become ABANDONED (35 U.S.C. § 133). 
Any reply received by the Office later than three months after the mailing date of this communication, even if timely filed, may reduce any 
earned patent term adjustment. See 37 CFR 1.704(b). 

Status 

1 )E3 Responsive to communication(s) filed on 07 July 2005 . 
2a)D This action is FINAL. 2b® This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 1 1, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-9,11-14,16-32 and 34-46 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) D Claim(s) is/are allowed. 

6) IEI Claim(s) 1-9,11-14,16-32 and 34-46 is/are rejected. 

7) 0 Claim(s) is/are objected to. 

8) D Claim(s) are subject to restriction and/or election requirement. 

Application Papers 

9) D The specification is objected to by the Examiner. 

10)Q The drawing(s) filed on is/are: a)D accepted or b)D objected to by the Examiner. 

Applicant may not request that any objection to the drawing(s) be held in abeyance. See 37 CFR 1 .85(a). 

Replacement drawing sheet(s) including the correction is required if the drawing(s) is objected to. See 37 CFR 1 .121(d). 
11 )□ The oath or declaration is objected to by the Examiner. Note the attached Office Action or form PTO-152. 

Priority under 35 U.S.C. § 119 

12)D Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 1 19(a)-(d) or (f). 
a)D All b)D Some * c)D None of: 

1 Certified copies of the priority documents have been received. 

2. D Certified copies of the priority documents have been received in Application No. . 

3. Q Copies of the certified copies of the priority documents have been received in this National Stage 

application from the International Bureau (PCT Rule 17.2(a)). 
* See the attached detailed Office action for a list of the certified copies not received. 
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DETAILED ACTION 



1 . This is in response to an amendment filed July 7 , 2005. 

2. Claims 1 and 24 have been amended 

3. Claim 10, 15, 33 and 38 have been canceled 

4. No claim has been added. 

5. Claims 1-9, 1 1-14, 16-32, 34-37 and 38-46 remain pending. 

Response to Arguments 

6. Applicant's arguments with respect to claims 1-9, 1 1-14, 16-32, 34-37 and 38-46 have 
been considered but are moot in view of the new ground(s) of rejection. 

Claim Rejections - 35 USC § 103 

7. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

8. Claims 1-9, 11-14, 16-32, 34-37 and 38-46 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Minear et al (U.S. Patent No. 5,983,350) in view of Bull et al (U.S. Patent No. 



6,799,270) 
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As per claims 1 and 24, Minear et al teach a method/computer readable medium for releasing 
digital content to a rendering application the rendering application for forwarding the digital 
content to an ultimate destination by way of a path there between, the path being defined by at 
least one module, the digital content initially being in an encrypted form comprising decrypting 
the encrypted digital content if in fact each such defining module is to be trusted and forwarding 
the decrypted digital content to the rendering application for further forwarding to the ultimate 
destination by way of the authenticated path (see column 2 lines 52-4 line 11, 4 lines 37 47, 5 
lines 34-6 line 2). Minear et al fail to teach an inventive concept of performing an authentication 
of at least a portion of the path determine whether each defining module thereof is to be trusted 
to appropriately handle the digital content passing there through, traversing the at least a portion 
of the path to develop a map of each module in the path; and authenticating each module in the 
map and receiving from the module a certificate as issued by a certifying authority; and 
determining from the received certificate whether such received certificate is acceptable for 
purposes of authenticating the module. However, Dull et al teach inventive concept of 
performing an authentication of at least a portion of the path determine whether each defining 
module thereof is to be trusted to appropriately handle the digital content passing there through, 
traversing the at least a portion of the path to develop a map of each module in the path; and 
authenticating each module in the map and receiving from the module a certificate as issued by a 
certifying authority; and determining from the received certificate whether such received 
certificate is acceptable for purposes of authenticating the module (see figl, 2, column 3 lines 15- 
5 line 64), Therefore, it would have been obvious to one of ordinary skill in the art at the time the 
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invention was made to modify the Minear et al's inventive concept to include Dull et al ! s 
inventive concept of performing an authentication of at least a portion of the path determine 
whether each defining module thereof is to be trusted to appropriately handle the digital content 
passing there through, traversing the at least a portion of the path to develop a map of each 
module in the path; and authenticating each module in the map and receiving from the module a 
certificate as issued by a certifying authority; and determining from the received certificate 
whether such received certificate is acceptable for purposes of authenticating the module because 
this would have ensure communication among computer systems in an insecure network readily 
occurs in an authenticated manner. Further, the signed object exchange utilizes available 
resources in an innovative and straightforward manner, while achieving communication 
techniques that are resistant to replay attacks and exportable. 

9. As per claims 2 and 25, Minear et al teach a method/computer readable medium further 
comprising scrambling the digital content upon such digital content being outputted from the 
rendering application to the path such that the scrnmbled digital content enters the user mode 
portion of the path, such scrambled digital content then passing through the modules that define 
the user mode portion of the path and transiting from the user mode portion to the kernel portion 
of the path; and de-scrambling the scrambled digital content upon such scrambled digital content 
transiting from the user mode portion to the kernel portion (see column 2 lines 52-4 line 11,4 
lines 37-47, 5 lines 34-6 line 20). 
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10. As per claims 3 and 26, Minear et al teach a method/computer readable medium 
comprising de-scrambling the scrambled digital content by way of a de-scrambling module (see 
column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 34-6 line 20). 

11. As per claims 4 and 27, Minear et al teach a method/computer readable medium 
comprising de-scrambling the scrambled digital content in the kernel portion of the path (see 
column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 34-6 line 20). 

12. As per claims 5 and 28, Minear et al teach a method/computer readable medium 
comprising performing an authentication of at least a portion of the kernel portion of the path to 
determine whether each defining module thereof is to be trusted to appropriately handle the 
digital content passing there through (see column 2 lines 52-4 line 11,4 lines 3-47, 5 lines 34-6 
line 20). 

13. As per claims 6 and 29, Minear et al teach a method/computer readable medium wherein 
the path includes a user mode portion and a kernel portion, the method comprising performing an 
authentication of at least a portion of the kernel portion of the path to determine whether each 
defining module thereof is to be trusted to appropriately handle the digital content passing there 
through (see column 2 lines 52-4 line 3, 4 lines 3-47, 5 lines 34-6 line 20). 

14. As per claims 7 and 30, Minear et al teach a method/computer readable medium further 
comprising scrambling the digital content upon such digital content being outputted from the 
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rendering application to the path such that the scrambled digital content enters the user mode 
portion of the path, such scrambled digital content then passing through the modules that define 
the user mode portion of the path and transiting from the user mode portion to the kernel portion 
of the path; and de-scrambling the scrambled digital content upon such scrambled digital content 
transiting from the user mode portion to the kernel portion (see column 2 lines 52-4 line 11,4 
lines 37-47, 5 lines 34-6 line 20). 

15. As per claims 8 and 3 1 , Minear et al teach a method/computer readable medium 
comprising de-scrambling the scrambled digital content by way of a de-scrambling module (see 
column 2 lines 52-4 line 11,4 lines 3-47, 5 lines 34-6 line 20). 

16. As per claims 9 and 32, Minear et al teach a method/computer readable medium 
comprising de-scrambling the scrambled digital content in the kernel portion of the path (see 
column 2 lines 52-4 line 11,4 lines 3-47, 5 lines 34-6 line 20). 

17. As per claims 1 1 and 34, Minear et al teach a method/computer readable medium 
wherein performing the authentication further comprises ignoring each module not in the map 
(see column 2 lines 52-4 line 1 1, 4 lines 37-47, 5 lines 34-6 line 20) . 

18. As per claims 12 and 35, Minear et al teach a method/computer readable medium 
wherein performing the authentication comprises authenticating an initial module determining all 
first destination modules that receive data from such initial module authenticating each such first 
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destination module, determining all second destination modules that receive data from each 'such 
first destination module, iteratively repeating the authenticating and determining steps for third, 
fourth, fifth, etc. destination modules until each module in such at least a portion of the path had 
been determined and authenticated (see column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 34-6 
line 20). 

19. As per claims 13 and 36, Minear et al teach a method/computer readable medium 
wherein authenticating the initial module comprises authenticating a module in the at least a 
portion of the path that is to receive the digital content before any other module in the at least a 
portion of the path, whereby the initial module leads to fully determining all other modules that 
define the at least a portion of the path (see column 2 Lines 52-4 line 11,4 lines 37-47, 5 lines 6 
line 20). 

20. As per claims 14 and 37, Minear et al teach a method/computer readable medium 
comprising employing a database device to keep track of all modules determined to be in the at 
least a portion of the path, whereby already-determined modules in the at least a portion of the 
path can be recognized (see column 2 lines 52-4 line 11,4 Lines 3-47, 5 Lines 34-6 Line 20). 

21. As per claims 16 and 39, Minear et al teach a method/computer readable medium 
wherein performing an authentication further comprises checking a revocation list to ensure that 
the received certificate has not been revoked (see column 2 lines 52-4 line 11,4 lines 3-47, 5 
lines 34-6 line 20). 
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22. As per claims 17 and 40, Minear et al teach a method/computer readable medium further 
comprising receiving the revocation list from a certifying authority; storing the received 
revocation list in a secure location (see column 2 lines 52-4 line 11,4 lines 3-47, 5 lines 34-6 
Line 20). 

23. As per claims 18 and 41, Minear et al teach a method/computer readable medium 
wherein performing an authentication further comprises refusing to decrypt the encrypted digital 
content if at least one module in the at least a portion of the path fails to provide an acceptable 
certificate (see column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 34-6 line 20). 

24. As per claims 19 and 42, Minear et al teach a method/computer readable medium 
wherein performing an authentication further comprises decrypting the encrypted digital content 
if all the modules in the at least a portion of the path provide an acceptable certificate (see 
column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 34-6 line 20)! 

25. As per claims 20 and 43, Minear et al teach a method/computer readable medium 
wherein performing an authentication further comprises, for each module in the at least a portion 
of the path that fails to provide an acceptable certificate defining a sub-portion of the path 
including the non-providing module, scrambling the digital content upon such digital content 
entering the tunnel portion of the path such scrambled digital content then passing through the 
modules that define the sub-portion of the path; and de-scrambling the scrambled digital content 
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upon such scrambled digital content exiting from the sub-portion of the path; and declaring the 
sub-portion trustworthy (see column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 34-6 line 20). 

26. As per claims 21 and 44, Minear et al teach a method/computer readable medium 
wherein the path includes a user mode portion and a kernel portion, the method comprising 
performing an authentication of the user mode portion of the path and of the kernel portion of the 
path to determine whether each defining module thereof is to be trusted to appropriately handle 
the digital content passing there through (see column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 
34-6 line 20.). 

27. As per claims 22 and 45, Minear et al teach a method/computer readable medium 
wherein the path includes a tunneled portion, the method further comprising scrambling the 
digital content upon such digital content entering the tunneled portion of the path, such 
scrambled digital content then passing through the modules that define the tunneled portion of 
the path; and de-scrambling the scrambled digital content upon such scrambled digital content 
exiting from the tunneled portion of the path, and wherein performing an authentication 
comprises performing an authentication of at least a portion of the path external to the tunneled 
portion of the path to determine whether each defining module thereof is to be trusted to 
appropriately handle the digital content passing there through, an authentication of the tunneled 
portion being unnecessary (see column 2 lines 52-4 line 11,4 lines 37-47, 5 lines 34-6 Line 20). 
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28. As per claims 23 and 46, Minear et al teach a method/computer readable medium 
wherein the path includes a user mode portion, a kernel portion, and a tunneled portion in the 
user mode portion, the method further comprising scrambling the digital content upon such 
digital content entering the tunneled portion of the user mode portion of the path, such scrambled 
digital content then passing through the modules that define the tunneled portion of the user 
mode portion of the path, and de-scrambling the scrambled digital content upon such scrambled 
digital content exiting from the tunneled portion of the user mode portion of the path and 
wherein performing an authentication comprises performing an authentication of at least a 
portion of the path external to the tunneled portion of the user mode portion of the path to 
determine whether each defining module thereof is to be trusted to appropriately handle the 
digital content passing there through, an authentication of the tunneled portion being unnecessary 
(see column 2 lines 52-4 line 11,4 lines 37- 47, 5 lines 34-6 line 20). 



Conclusion 



29. The prior art made of record and not relied upon is considered pertinent to applicant's 
disclosure, (see form 892). 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to FIRMN BACKER whose telephone number is 571-272-6703. 
The examiner can normally be reached on Monday - Thursday 9:00 AM - 5:00 PM. 
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If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, James Trammell can be reached on (571) 272-6712. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). 
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